A specially crafted HTTP response from a tracker (or potentially a UPnPbroadcast) can crash libtorrent in the parse_chunk_header() function.Although this function is not present in this version, upstream'sadditional sanity checks were added to abort the program if necessaryinstead of crashing it.

For Debian 7 "Wheezy", these problems have been fixed in version0.15.10-1+deb7u1.

We recommend that you upgrade your libtorrent-rasterbar packages.

Further information about Debian LTS security advisories, how to applythese updates to your system and frequently asked questions can befound at: https://wiki.debian.org/LTS